TREN
+90 540 340 35 35

Legal

Data Protection Notice

What personal data we process, on what basis, and the rights you have.

Last updated 25 August 2026

1. Data controller

The data controller is Mustafa Kalaycı Şahıs İşletmesi. Our address is 7004 Sokak, Gürpınar, Pınarbaşı Sk. No:20, 35000 Bornova / Izmir. Our phone number is +90 540 340 35 35. This notice was prepared under Article 10 of Turkey's Personal Data Protection Law No. 6698 (“KVKK”).

This notice covers mkalaycıpalet.com only. It does not cover the other sites you reach from here, or the processing carried out at our shop. Those are separate activities and people are informed about them separately, in the place where they happen.

2. Personal data we process

This site has no form, no analytics tool, no cookie that tracks you and no third-party embed. Even so, we do not claim that no data is processed at all, because every website leaves access records on its server. Below we list what actually happens.

Please do not share special categories of personal data with us, such as health information or biometric data. We do not need it and we do not ask for it.

3. Purpose, method and legal basis

Access records are created on the hosting infrastructure so that the site runs securely and faults can be detected. We do not create these records ourselves, but we are the ones who chose the infrastructure. They are collected by automated means, and the legal basis is the legitimate interest of the data controller under Article 5/2(f) of the Law.

If you contact us, we use what you share to answer your question, prepare a quote and, where relevant, to carry out the pre-contractual steps. On a phone call this is collected by non-automated means, and in written channels by automated means. The legal basis is Article 5/2(c) where a contract is involved and Article 5/2(f) otherwise.

We do not ask for your explicit consent, because the Law already provides a basis for each of the purposes above. Asking for consent where a legal ground exists would be misleading.

4. Transfers and processors

We do not sell or rent your personal data, and we do not share it for advertising. The following parties are involved for the service to work technically.

The hosting servers may be located abroad. In that case the regime in Article 9 of the Law, as amended on 1 June 2024, applies. It works in order, starting with an adequacy decision, then appropriate safeguards, then one of the incidental cases. We are telling you this plainly rather than claiming a compliance status we have not established. If you prefer to avoid infrastructure abroad, you can reach us by phone only.

5. Retention

Access records are kept for the short period the hosting infrastructure applies for security purposes and are then deleted automatically. Correspondence is kept as long as the matter it concerns remains open.

If the contact leads to a contract, the periods in the Turkish Commercial Code and the Tax Procedure Law apply to the records tied to that relationship. When the purpose disappears and no legal period requires them, we delete or anonymise the data.

6. Your rights and how to use them

Under Article 11 of the Law you have the following rights.

  1. To learn whether your personal data is processed
  2. To request information if it has been processed
  3. To learn the purpose of processing and whether the data is used accordingly
  4. To know the third parties to whom the data is transferred, at home or abroad
  5. To request correction if the data is incomplete or inaccurate
  6. To request erasure or destruction under Article 7 of the Law
  7. To request that correction, erasure and destruction be notified to third parties the data was transferred to
  8. To object to a result against you arising solely from automated analysis
  9. To claim compensation for damage arising from unlawful processing

You can submit your request to the address above in writing with a wet signature, by delivering it in person or sending it through a notary or registered mail. Written requests sent through WhatsApp are also assessed, provided your identity can be verified. A request made verbally by telephone is not a valid application channel under the Communiqué. The phone line is there for questions.

Your application must contain your name and surname, your signature if it is written, your Turkish ID number (for foreign nationals, nationality and passport or identity number), your address for notification, and the subject of your request.

We answer within thirty days at the latest, and free of charge as a rule. The cost exceptions set out in the Communiqué are reserved. If your application is rejected or you are not satisfied with the answer, you may complain to the Personal Data Protection Board within thirty days of the answer and in any case within sixty days of your application. A complaint cannot be made before applying to us.

7. Cookies and device storage

This site sets no cookies, so no cookie consent banner is shown. Fonts are served from our own server and no third-party font, analytics or advertising service is called. We keep a single item in browser storage, and it is strictly necessary for the interface you asked for.

This record never leaves your device and does not identify you. Because it is strictly necessary, it does not require consent. It is deleted automatically when you close the tab. If we ever add an analytics or marketing cookie, we will set up consent management first and update this text.

8. Security

The site is served over an encrypted connection. It is a static site, which means there is no database holding visitor records and no login area. This removes a large part of the usual attack surface.

9. Effective date and updates

This notice was last updated on 25 August 2026. If the way we process data changes, we update this page and change the date above. It is also reviewed in line with legislative changes and changes in how the site operates. The current version is always published on this page. Where the Turkish and English texts differ, the Turkish text prevails.